CVE-2022-23497 Insecure file access in FreshRSS

FreshRSS is a free, self-hostable RSS aggregator. User configuration files can be accessed by a remote user. In addition to user preferences, such configurations contain hashed passwords brypt with cost 9, salted of FreshRSS Web interface. If the API is used, the configuration might contain a...

CVE-2022-45290

Kbase Doc v1.0 was discovered to contain an arbitrary file deletion vulnerability via the component /web/IndexController.java...

CVE-2022-45290

Kbase Doc v1.0 was discovered to contain an arbitrary file deletion vulnerability via the component /web/IndexController.java...

Arbitrary file deletion

Kbase Doc v1.0 was discovered to contain an arbitrary file deletion vulnerability via the component /web/IndexController.java...

CVE-2022-45290

Kbase Doc v1.0 was discovered to contain an arbitrary file deletion vulnerability via the component /web/IndexController.java...

Kbase Doc 路径遍历漏洞

Kbase Doc is an online preview and editing system for documents by Eko Zhan, an individual developer. A security vulnerability exists in Kbase Doc v1.0, which originates from the deletion of an arbitrary file contained in the component /web/IndexController.java...

CVE-2022-45290

CVE-2022-45290 affects Kbase Doc v1.0, with an arbitrary file deletion vulnerability in the component /web/IndexController.java. The CVSS 3.1 data indicates a CRITICAL severity (base score 9.1) with Network attack vector, no privileges required, no user interaction, and impact to both integrity a...

CVE-2022-45290

Kbase Doc v1.0 was discovered to contain an arbitrary file deletion vulnerability via the component /web/IndexController.java...

PT-2022-27459 · Kbase Doc · Kbase Doc

Name of the Vulnerable Software and Affected Versions: Kbase Doc version 1.0 Description: The issue is related to an arbitrary file deletion vulnerability. It affects the component /web/IndexController.java. There is no information provided about the estimated number of potentially affected devic...

Denial Of Service (DoS)

github.com/casdoor/casdoor is vulnerable to denial of service. The vulnerability exists in the DeleteFile function of storage.go due to arbitrary file deletion via uploadFile which allows an attacker to delete arbitrary files in the system...

GHSA-F93F-55C2-8C89 Casdoor arbitrary file deletion vulnerability via uploadFile function

Casdoor before v1.126.1 was discovered to contain an arbitrary file deletion vulnerability via the uploadFile function...

Casdoor arbitrary file deletion vulnerability via uploadFile function

Casdoor before v1.126.1 was discovered to contain an arbitrary file deletion vulnerability via the uploadFile function...

CVE-2022-44942

Casdoor before v1.126.1 was discovered to contain an arbitrary file deletion vulnerability via the uploadFile function...

Arbitrary file deletion

Casdoor before v1.126.1 was discovered to contain an arbitrary file deletion vulnerability via the uploadFile function...

CVE-2022-44942

Casdoor prior to v1.126.1 is affected by CVE-2022-44942 due to an arbitrary file deletion vulnerability in the uploadFile function. The underlying issue allows an attacker with network access and low privileges (no user interaction required) to delete files, with an overall impact on integrity an...

PT-2022-27342 · Casdoor · Casdoor

Name of the Vulnerable Software and Affected Versions: Casdoor versions prior to 1.126.1 Description: The issue is related to an arbitrary file deletion vulnerability. This vulnerability can be exploited via the uploadFile function. Recommendations: For versions prior to 1.126.1, update to versio...

CVE-2022-44942

Casdoor before v1.126.1 was discovered to contain an arbitrary file deletion vulnerability via the uploadFile function...

WordPress Easy WP SMTP Plugin < 1.5.2 Multiple Vulnerabilities

The WordPress plugin Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

The vulnerability of the command-line interface (CLI) of Fortinet FortiAP-U micro-programming system allows a malicious actor to gain unauthorized access to read, modify, and delete files, as well as execute arbitrary commands.

The vulnerability of the command-line interface CLI of Fortinet FortiAP-U micro-programming system lies in incorrect restrictions on the path name to the restricted directory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to read, modify, and delete files, as wel...

Casdoor 路径遍历漏洞

Casdoor is an open source Identity and Access Management IAM / Single Sign-On SSO platform with a Web UI that supports OAuth 2.0 / OIDC and SAML authentication. A security vulnerability exists in Casdoor versions prior to v1.126.1, which stems from its uploadFile function that allows an attacker ...